UNITRONIX c2aedb10fe Enhance security and input validation across CDAP and organization routes ...

- Implemented input validation for `orgId` and `deviceId` in CDAP and organization detail routes using `assertSafeApiId`, returning a 400 error for invalid inputs.
- Added HTML escaping for `deviceId` and `orgId` in views to prevent XSS vulnerabilities.
- Hardened `patch-role-scope-i18n.js` against prototype pollution with a guard for unsafe nested keys.
- Updated CodeQL configuration to include new exclusions and ensure documented exclusions are applied.

2026-07-09 21:16:55 +02:00

..

auth.js

fix: enhance server admin access and error handling

2026-07-05 20:03:57 +02:00

csrf.js

fix: resolve 8 GitHub issues (#90 #97 #100 #82 #78 #75 #98 #68)

2026-04-10 00:00:04 +02:00

goApiProxy.js

fix(api): Go :21114 default API and Node :21121 compat proxy (#160)

2026-06-03 02:16:24 +02:00

i18n.js

Enhance security and input validation across CDAP and organization routes

2026-07-09 21:16:55 +02:00

rateLimiter.js

fix: enhance API handling and rate limiting for panel and desktop layout

2026-07-05 21:16:50 +02:00

security.js

fix: Linux HTTP/HTTPS protocol toggle sync and health checks (#219)

2026-06-24 19:16:52 +02:00

wanSecurity.js

feat: RustDesk Pro direct strategy assignments

2026-07-05 19:07:31 +02:00

wsOrigin.js

security: fix 3 critical + 3 high findings from production audit

2026-05-26 13:35:12 +02:00